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(54) IC CARD AND RECORD MEDIUM 
(57)Abstract: 

PROBLEM TO BE SOLVED: To save an application 
program(AP) stored in an IC card according to the 
judgment of a user, and to prevent the illegal use of the 
saved AP. 

SOLUTION: An IC card 201 generates and manages an 
arbitrary cryptographic key, and enciphers an AP to be 
saved among APS stored in an internal memory by using 
this cryptographic key, and saves this AP through an IC 
card reader/writer 211 to a connected terminal equipment 
221, and deletes the AP before encipherment. Also, at the 
time of restoring the saved AP, the IC card 201 decodes 
the AP received from the terminal equipment 221 by using 
the managed cryptographic key, and restores the AP in 
the internal memory. 
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DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the technique which carries out operational 
administration of the IC card with which one or more data is stored, and relates to the technique of 
showing the solution over security needs especially. 
[0002] 

[Description of the Prior Art] Conventionally only the data which an application program ("AP" is called 

hereafter.) uses were stored in the IC card, and the utilization gestalt it was made to operate AP was 

common at the terminal unit side which read this data through IC card reader / writer. 

[0003] On the other hand, the motion which stores AP in an IC card is becoming large by storing the 

operating system (card OS) for operating AP on an IC card in recent years in an IC card. 

[0004] Moreover, two or more AP is stored in the IC card of one sheet, operability is raised by unifying 

two or more IC cards to the IC card of one sheet, and carrying out the share of the cost of an IC card 

in AP issuance engine is expected. 

[0005] In addition, MULTOS is known as an example of Card OS. 

[0006] Each AP divided, and was recorded by the special fire wall program, and MULTOS has 
guaranteed that other AP does not block actuation while various AP outputted to the IC card confirms 
whether to be what loading to an IC card was permitted correctly as description is made by reference 
called Fuji-Keizai USA "the trend of the electronic advance card in Japan, the U.S. and Europe, and a 
future direction." In order that loading to an IC card may confirm whether to be what was permitted 
correctly, in advance of loading of AP, a management engine verifies the justification of AP and 
performs processing which guarantees being loaded only to a normal user's IC card. Since deletion of 
AP loaded to the IC card as well as loading is performed after checking it, it needs to guarantee the 
justification of deletion from the IC card which this ** with a management engine. 
[0007] 

[Problem(s) to be Solved by the Invention] MULTOS cannot load AP without a management engine's 
permission to an IC card, but since it can prevent copying AP to an IC card indefinitely and it can 
realize effective management, it is spreading as a card OS. 

[0008] However, according to the utilization situation of an IC card, such strict management is decision 



of a user and will restrict flexible employment to which only specific AP is evacuated temporarily from 
the IC card with which two or more AP was stored. 

[0009] For example, to recover AP to which evacuated AP which is not needed for a while from the IC 
card, evacuated AP stored in the IC card by decision of a user, and cancelled from the time of a third 
party using an IC card temporarily, constraint of the amount of memory, etc. to replace with other AP 
to use, and it was made to evacuate is desired. 

[0010] However, since a management engines permission is needed also at the time of deletion of AP 

from an IC card as MULTOS was mentioned above in the IC card used as Card OS, employment to 

which it is decision of a user and AP is evacuated temporarily cannot be performed. 

[001 1] The object of this invention is to make it possible to prevent the unauthorized use of the data to 

which it is made to have evacuated while making it possible to evacuate the data stored in the IC card 

by decision of a user. 

[0012] 

[Means for Solving the Problem] In order to attain the above-mentioned object, this invention 
enciphers the data stored in the IC card within an IC card using the encryption key generated within 
the IC card, and he is trying to evacuate the data after encryption from an IC card. Moreover, the 
generated encryption key is managed within the IC card, and in case the data to which it was made to 
evacuate are recovered, he is trying to decode this data within an IC card using the encryption key 
managed within the IC card. 

[0013] Namely, a means to receive from the outside the assignment of data which this invention is an 
IC card with which one or more data is stored in internal memory as the 1st mode, and is made 
applicable to evacuation, While enciphering using the generated encryption key, a means to generate 
the encryption key of arbitration, and the data received as an object for evacuation A means to 
eliminate the data before encryption, and a means to memorize the generated encryption key, A 
means to evacuate the data after encryption outside, and a means to receive the data to which it was 
made to evacuate from the exterior, The IC card characterized by having a means to decode the 
received data using the memorized encryption key, and a means to re-store the data after decode in 
internal memory is offered. 

[0014] According to the 1st mode, since it cannot decode except the IC card which enciphered this, 
being used improperly of the data to which it was evacuated from the IC card is lost. 
[0015] What is necessary is just to make it transpose to the data after enciphering the data before 
encryption here, when the enciphered data do not need to be evacuated from an IC card. 
[0016] Namely, a means to receive from the outside the assignment of data which this invention is an 
IC card with which one or more data is stored in internal memory as the 2nd mode, and is made 
applicable to nullification, While enciphering using the generated encryption key, a means to generate 
the encryption key of arbitration, and the data received as an object for nullification The means 
replaced with the data after enciphering the data before encryption, and a means to memorize the 
generated encryption key, The IC card characterized by having a means to receive from the outside 
the assignment of data made applicable to validation, and a means to decode the data received as an 
object for validation using the memorized encryption key is offered. 

[0017] in addition, the 1st mode and the 2nd voice - an IC card [ like ] — naturally also in any, it comes 



out of one or more data stored in internal memory that AP can be included. 
[0018] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention is explained with 
reference to a drawing. 

[0019] Drawing 2 is the whole IC card system block diagram concerning this operation gestalt. 
[0020] As shown in drawing 2 , IC card system concerning this operation gestalt has the composition 
that IC card 201 which a user owns, and the terminal unit 221 were connected through IC card reader 
/ writer 211. 

[0021] IC card 201 is equipped with MPU203, memory 202, and transmission and reception IF 204, 
and is constituted, and a terminal unit 221 is equipped with MPU223, memory 222, a keyboard 224, a 
display 225, and transmission and reception IF 226, and is constituted. 

[0022] Moreover, IC card reader / writer 21 1 is equipped with transmission and reception IF 212 and 
transmission and reception IF 213, and is constituted. 

[0023] Although IC card 201 and a terminal unit 221 transmit and receive through IC card reader / 
writer 21 1 , a communicative gestalt does not ask a cable/wireless. 

[0024] Next, the content stored in the memory 202 of IC card 201 is explained using drawing 3 . 
[0025] Although or more 1 AP, such as a credit and GSM (global system for mobile communication), is 
stored in the memory 202 of IC card 201 as shown in drawing 3 , AP#1 (321) and AP#2 (322) shall be 
stored here. 

[0026] Moreover, as shown in drawing 3 , the card identity child 31 1 who is an identifier of a proper, 
the public key 312 of the certificate authority in an unsymmetrical code, the private key 313 of IC card 
201 in an unsymmetrical code, the public key 314 of IC card 201 in an unsymmetrical code, the AP 
management information 315, and the password 316 for permitting access to IC card 201 are stored in 
the memory 202 of IC card 201 every IC card 201. 

[0027] Drawing 7 is drawing showing an example of the AP management information 315. 
[0028] The AP management information 315 consists of AP managed data lists 700 corresponding to 
each of AP (here, it is AP#1 (321) and AP#2 (322).) stored in the memory 202 of IC card 201 . 
[0029] As shown in drawing 7 , the AP managed data list 700 of AP#1 (321) The AP identifier 701 
which is an identifier of AP#1 (321), and the AP file information 702, The load counter 703 which 
shows the count which loaded AP#1 (321) to IC card 201, The deletion counter 704 which shows the 
count which deleted [ 201 ] AP#1 (321), It consists of a pointer 705 to the evacuation data record 800 
shown in drawing 8 , and an entry pointer 706 to the AP managed data list 700 of AP#2 (322) which is 
following AP. 

[0030] In addition, the AP managed data list 700 of AP#2 (322) is also the same configuration. 
[0031] Moreover, "NULL" is set up, and if it becomes, if corresponding AP to which corresponding AP 
is not evacuated is evacuated, the pointer to the evacuation data record 800 will be set to a pointer 
705, when evacuation of AP is completed. In addition, about the detail of the evacuation data record 
800, it mentions later. 

[0032] It returns to drawing 3 and AP evacuation program 303, AP recovery program 304, the 
encryption key generator 305, the signature generator 306, symmetry cryptosystem encryption / 
decode program 307, and unsymmetrical cryptosystem encryption / decode program 308 are stored in 



the memory 202 of IC card 201 . 

[0033] Next, the content stored in the memory 222 of a terminal unit 221 is explained using drawing 4 . 
[0034] As shown in drawing 4 , the terminal identification child 41 1 who is an identifier of a proper, and 
the public key 412 of the certificate authority in an unsymmetrical code are stored in the memory 222 
of a terminal unit 221 every terminal unit 221. 

[0035] Moreover, as shown in drawing 4 , AP evacuation program 403, AP recovery program 404, the 
signature verification program 405, symmetry cryptosystem encryption / decode program 406, and 
unsymmetrical cryptosystem encryption / decode program 407 are stored in the memory 222 of a 
terminal unit 221. 

[0036] In addition, although it is possible that the various data stored in the memory 202 of IC card 201 
and the memory 222 of a terminal unit 21 1 form generation / issuance / management engine 
respectively, the various data containing the public key (public key with which the signature was 
performed by the certificate authority) attested by the certificate authority which generally exists shall 
already be set up here. 

[0037] Next, in IC card system concerning this operation gestalt, the actuation at the time of 
evacuating AP stored in IC card 201 to a terminal unit 221 is explained using drawing 1 . 
[0038] Drawing 1 is drawing showing the flow of the actuation at the time of AP evacuation in IC card 
system concerning this operation gestalt. 

[0039] If AP evacuation program 403 is started with a terminal unit 221 and IC card 201 is inserted in 
IC card reader / writer 21 1 , AP evacuation program 303 will be started with IC card 201 , and the 
following processings will be performed. In addition, the following processings are realized because 
MPU203 of IC card 201 and MPU223 of a terminal unit 221 perform AP evacuation program 303 and 
AP evacuation program 403. 

[0040] First, IC card 201 and a terminal unit 211 perform mutual recognition (step 100, step 110). 
Since the authentication method which the authentication method which used the unsymmetrical key 
code is specified to ISO (ISO 9798-3) about mutual recognition, for example, and used the symmetry 
key code for ISO (ISO 9798-2) is specified, a detail is omitted here. 

[0041] then, IC card 201 and a terminal unit 21 1 - a principal - it attests (step 101 , step 111). 
[0042] In principal authentication, in detail, first, a terminal unit 221 requires the input of a password of 
a user through a display 225, and the password which the user entered from the keyboard 224 is 
transmitted to IC card 201 (step 111). 

[0043] And if IC card 201 receives a password from a terminal unit 21 1, it will compare the received 
password with the password 316 stored in memory 202, and will attest whether you are a right user 
(step 101). In addition, the authentication result by IC card 201 is notified to a terminal unit 211. 
[0044] Now, when it is attested that he is a right user, IC card 201 and a terminal unit 21 1 specify the 
object AP for evacuation (step 102, step 112). 

[0045] In assignment for [ AP ] evacuation, in detail, a terminal unit 221 acquires the list of AP stored 
in IC card 201 from IC card 201, and displays it on a display 225 first, and AP which the user specified 
from the keyboard 224 is notified to IC card 201 as an object AP for evacuation (step 112). In addition, 
advice for [ AP ] evacuation is performed by transmitting AP assignment data record 500 shown in 
drawing 5 . 



[0046] Drawing 5 is drawing showing an example of AP assignment data record 500. 

[0047] As shown in drawing 5 , AP assignment data record 500 consists of an AP identifier 501 which 

is an identifier for specifying the object AP for evacuation as a meaning, a terminal identification child 

(terminal identification child 41 1 stored in memory 222) 502 of a terminal unit 221 , and a time stump 

503 in which the time in which the terminal unit 221 received assignment for [ AP ] evacuation is 

shown. 

[0048] And IC card 201 receives assignment for [ AP ] evacuation by receiving AP assignment data 
record 500 from a terminal unit 21 1 (step 102). 

[0049] Then, IC card 201 will generate the encryption key for enciphering the object AP for evacuation 
by starting the encryption key generator 305, if AP assignment data record 500 is received (step 103). 
Here, the encryption key which enciphers and generates the object AP for evacuation in a symmetry 
code is an encryption key (for example, random number) in a symmetry code. 
[0050] Then, IC card 201 eliminates AP before encryption while enciphering the object AP for 
evacuation using the encryption key generated at step 103 by starting symmetry cryptosystem 
encryption / decode program 308 (step 104). 

[0051] Then, IC card 201 generates a signature by starting the signature generator 306 (step 105). 
[0052] At step 105, in detail, by generating an authentication child using a Hash Function and starting 
unsymmetrical cryptosystem encryption / decode program 308 from the data record 900 for signature 
generation shown in drawing 9 , IC card 201 enciphers the authentication child who generated using 
the private key 313 of IC card 200 stored in memory 202, and generates a signature. In addition, refer 
to work "a present age code" besides for example, Tatsuaki Okamoto, and the Sankei books issuance 
for the detail of a Hash Function and signature generation. 

[0053] Drawing 9 is drawing showing an example of the data record 900 for signature generation. 
[0054] As shown in drawing 9 , the data record 900 for signature generation The object AP 902 for 
evacuation enciphered as the AP identifier 901 for [ AP ] evacuation With the terminal identification 
child 903 (terminal identification child 502 in AP assignment data record 500 received from the 
terminal unit 221) It consists of a time stump (time stump 503 in AP assignment data record 500 
received from the terminal unit 221) 904, and a card identity child (card identity child 313 stored in 
memory 202) 905 of IC card 201. 

[0055] Then, IC card 201 and a terminal unit 21 1 transmit and receive the enciphered object AP for 
evacuation (step 106, step 113). 

[0056] In transmission and reception for [ which was enciphered / AP ] evacuation, the object AP for 
evacuation which IC card 201 enciphered is first transmitted to a terminal unit 221 in detail (step 106). 
In addition, transmission for [ which was enciphered / AP ] evacuation is performed by transmitting the 
evacuation AP data record 600 shown in drawing 6 R> 6. 

[0057] Drawing 6 is drawing showing an example of the evacuation AP data record 600. 

[0058] As shown in drawing 6 , the evacuation AP data record 600 consists of the AP identifier 601 for 

[ which was enciphered / AP ] evacuation, the card identity child (card identity child 313 stored in 

memory 202) 603 of IC card 201 for [ AP / 602 ] evacuation who enciphered at step 104, signature 

604 generated at step 105, and a public key 605 (public key 314 stored in memory 202) of IC card 

201. 



[0059] And a terminal unit 221 receives the enciphered object AP for evacuation by receiving the 
evacuation AP data record 600 from IC card 201 (step 113). 

[0060] Now, a terminal unit 221 will verify the signature 604 in the evacuation AP data record 600 by 
starting the signature verification program 405, if the evacuation AP data record 600 is received (step 
114). 

[0061] At step 1 14, in detail, by starting unsymmetrical cryptosystem encryption / decode program 
407, first, a terminal unit 221 decodes the public key 605 in the evacuation AP data record 600 using 
the public key 412 of a certificate authority, verifies a public key 605, then decodes the signature 604 
in the evacuation AP data record 600 using the verified public key 605, and verifies signature 604. 
[0062] And a terminal unit 221 stores the evacuation AP data record 600 in memory 222 or a disk unit, 
if it checks that the evacuation AP data record 600 is transmitted from IC card 201 , and that the 
evacuation AP data record 600 is not altered as a result of verification by step 114 (step 115). In 
addition, a terminal unit 221 notifies the purport that it succeeded in evacuation of AP to IC card 201. 
[0063] Then, IC card 201 will update the corresponding AP managed data list 700, if the purport that it 
succeeded in evacuation of AP is notified from a terminal unit 221 (step 107). 
[0064] At step 107, IC card 201 generates the evacuation data record 800, and, specifically, sets the 
pointer to the generated evacuation data record 800 as the pointer 705 in the corresponding AP 
managed data list 700. 

[0065] Drawing 8 is drawing showing an example of the evacuation data record 800. 
[0066] As shown in drawing 8 , the evacuation data record 800 consists of the terminal identification 
child (terminal identification child 502 in AP assignment data record 500 received from the terminal 
unit 221) 801 , a time stump (time stump 503 in AP assignment data record 500 received from the 
terminal unit 221) 802, an encryption key 803 generated at step 103, and signature 804 generated at 
step 105. 

[0067] By actuation explained above, AP stored in IC card 201 can be evacuated to a terminal unit 
221. 

[0068] In addition, although he is trying to encipher the object AP for evacuation in a symmetry code, 
you may make it encipher the object AP for evacuation in an unsymmetrical code in the actuation 
shown in drawing 1 . In this case, IC card 201 generates the encryption key according to the algorithm 
of an unsymmetrical code at step 103. 

[0069] Moreover, since they can share a key temporarily, they may temporarily [ this ] be made for IC 
card 201 and a terminal unit 221 to be the processes of the mutual recognition of step 100 and step 
110, and to carry out cryptocommunication of the evacuation AP data record 600 in the actuation 
shown in drawing 1 , using a key. 

[0070] Moreover, you may make it a terminal unit 221 store the evacuation AP data record 600 in the 
location which it is made to make a user specify an evacuation location, and the user specified from 
the keyboard 224 in the actuation shown in drawing 1 . 

[0071] Moreover, in the actuation shown in drawing 1 , although he is trying to check that the 
evacuation AP data record 600 is transmitted from IC card 201, and that the evacuation AP data 
record 600 is not altered using the authentication technique by signature in order to raise security 
nature more, the main point of this invention is not limited by this. 



[0072] Next, in IC card system concerning this operation gestalt, the actuation at the time of recovering 
AP to which it was made to evacuate in the actuation shown in drawing 1 is explained using drawing 
10. 

[0073] Drawing 10 is drawing showing the flow of the actuation at the time of AP recovery in IC card 
system concerning this operation gestalt. 

[0074] If AP recovery program 404 is started with a terminal unit 221 and IC card 201 is inserted in IC 
card reader / writer 21 1 , AP recovery program 304 will be started with IC card 201 , and the following 
processings will be performed. In addition, the following processings are realized because MPU203 of 
IC card 201 and MPU223 of a terminal unit 221 perform AP recovery program 304 and AP recovery 
program. 

[0075] first, the actuation which explained IC card 201 and the terminal unit 21 1 by drawing 1 - the 
same - mutual recognition - carrying out (step 1 00, step 1 1 0) - a principal ~ it attests (step 1 01 , step 
111). 

[0076] And when it is attested that he is a right user, IC card 201 and a terminal unit 21 1 specify the 
object AP for recovery (step 1002, step 1012). 

[0077] In assignment for [ AP ] recovery, in detail, a terminal unit 221 acquires the list of AP under 
evacuation of AP stored in IC card 201 from IC card 201, and displays it on a display 225 first, and AP 
which the user specified from the keyboard 224 is notified to IC card 201 as an object AP for recovery 
(step 1012). In addition, advice for [ AP ] recovery is performed by transmitting AP assignment data 
record 500 like advice for [ AP ] evacuation. 

[0078] And IC card 201 receives assignment for [ AP ] recovery by receiving AP assignment data 
record 500 from a terminal unit 21 1 (step 1002). 

[0079] Then, IC card 201 will take out the evacuation data record 800 which the pointer 705 in the AP 
managed data list 700 for [ AP ] recovery and this AP managed data list 700 shows, if AP assignment 
data record 500 is received (step 1003). 

[0080] Then, IC card 201 and a terminal unit 21 1 transmit and receive the object AP for recovery (step 
1004, step 1013). 

[0081] In transmission and reception for [ AP ] recovery, a terminal unit 21 1 transmits in detail the 
evacuation AP data record 600 stored in memory 222 or a disk unit to a terminal unit 221 as an object 
AP for recovery first (step 1013). And IC card 201 receives the object AP for recovery by receiving 
evacuation AP data from a terminal unit 21 1 (step 1004). 

[0082] Now, it checks whether if the evacuation AP data record 600 is received, the signature 604 in 
the evacuation AP data record 600 and the signature 804 of IC card 201 in the evacuation data record 
800 taken out at step 1003 correspond (step 1005). 

[0083] If it checks that both of IC card 201 correspond, and by starting symmetry cryptosystem 

encryption / decode program 307 The encryption AP 602 in the received evacuation AP data record 

600 is decoded using the encryption key 803 in the evacuation data record 800 taken out at step 

1003. The decoded object AP for recovery is rearranged in memory 202 according to the file 

information 702 in the AP managed data list 700 taken out at step 1003 (step 1006). 

[0084] Furthermore, IC card 201 updates the AP managed data list 700 for [ AP ] recovery (step 

1007). 



[0085] At step 1007, IC card 201 eliminates the evacuation data record 800 taken out at step 1003, 
and, specifically, sets "NULL" as the pointer 705 in the AP managed data list 700 for [ AP ] recovery. 
[0086] IC card 201 can be made to recover AP which made it evacuate to a terminal unit 221 by 
actuation explained above. 

[0087] As explained above, according to the IC card system concerning this operation gestalt, it 
becomes possible to evacuate AP stored in IC card 201 to a terminal unit 221 from IC card 201 by 
decision of a user. And since he is trying to encipher using the encryption key which generated the 
object AP for evacuation within IC card 201 , except IC card 201 which enciphered this, AP evacuated 
from IC card 201 cannot be decoded, and is not used improperly. 

[0088] Then, even when IC card 201 is using MULTOS as Card OS especially, performing actuation 
shown in drawing 1 can realize flexible employment to which AP is evacuated temporarily by decision 
of a user. 

[0089] By the way, in IC card system concerning this operation gestalt, although he is trying to 
evacuate AP stored in IC card 201 to a terminal unit 221, AP can be temporarily cancelled within IC 
card 201 instead of evacuating AP, when AP enciphered when allowances were in the memory 202 of 
IC card 201 does not need to be evacuated from IC card 201. 

[0090] Hereafter, the actuation at the time of doing in this way is explained using drawing 1 1 . 

[0091] Drawing 1 1 is drawing showing the flow of the actuation at the time of AP nullification in IC card 

system concerning this operation gestalt. 

[0092] Although the actuation shown in drawing 1 1 is the same as the actuation shown in drawing 1 , 
in step 1 106, it differs in that AP which IC card 201 enciphered was stored in IC card 201 . Then, in the 
various data mentioned above, nothing will be set to the part which was required evacuation / in order 
to make it recover. 

[0093] According to the actuation shown in drawing 1 1 , although AP is not evacuated actually, since 
AP is enciphered within IC card 201, it can protect from a third party's threat. 

[0094] In addition, IC card 201 should just decode the actuation at the time of validating cancelled AP 
using the encryption key which used AP enciphered and cancelled when this was enciphered. 
[0095] Moreover, to be made to perform actuation shown in drawing 1 1 , it is necessary to make it 
make a user specify selection of whether AP is evacuated or it is made to cancel in a terminal unit 
221. 

[0096] Moreover, actuation shown in drawing 1 1 can be carried out independently of the actuation 
shown in drawing 1 . That is, it is possible to build IC card system which performs only actuation 
shown in drawing 1111 . 

[0097] In addition, by the above explanation, although the data made applicable [ for evacuation ] to 
nullification shall be AP, it is not necessary to explain that you may be other data other than AP. 
[0098] 

[Effect of the Invention] As explained above, according to this invention, it becomes possible to 
evacuate the data stored in the IC card from an IC card by decision of a user. And except the IC card 
which enciphered this, the data to which AP to which it is made to evacuate was evacuated from the 
IC card since he was trying to encipher using the encryption key generated within the IC card cannot 
be decoded, and are not used improperly. 



CLAIMS 



[Claim(s)] 

[Claim 1] A means to receive from the outside the assignment of data which one or more data 
is the IC cards stored in internal memory, and is made applicable to evacuation, While 
enciphering using the generated encryption key, a means to generate the encryption key of 
arbitration, and the data received as an object for evacuation A means to eliminate the data 
before encryption, and a means to memorize the generated encryption key, The IC card 
characterized by having a means to evacuate the data after encryption outside, a means to 
receive the data to which it was made to evacuate from the exterior, a means to decode the 
received data using the memorized encryption key, and a means to re-store the data after 
decode in internal memory. 

[Claim 2] A means to receive from the outside the assignment of data which one or more data 
is the IC cards stored in internal memory, and is made applicable to nullification, While 
enciphering using the generated encryption key, a means to generate the encryption key of 
arbitration, and the data received as an object for nullification The means replaced with the 
data after enciphering the data before encryption, and a means to memorize the generated 
encryption key, The IC card characterized by having a means to receive from the outside the 
assignment of data made applicable to validation, and a means to decode the data received as 
an object for validation using the memorized encryption key. 

[Claim 3] One or more data which are IC cards according to claim 1 or 2, and are stored in 
internal memory is IC cards characterized by including an application program. 
[Claim 4] It is the record medium which recorded the program installed in the terminal unit to 
which an IC card according to claim 1 is connected through IC card reader / writer. While 
receiving assignment of the data set as the evacuation object of the one or more data stored in 
the above-mentioned IC card A means to output the received content of assignment to the 
above-mentioned IC card, and a means to receive the data to which it was evacuated from the 
above-mentioned IC card, and to store in the memory of the above-mentioned terminal unit, A 
means to receive assignment of the data set as the recovery object of the data which are 
evacuated from the above-mentioned IC card and stored in the above-mentioned terminal unit, 
The record medium characterized by recording the program operated so that the above- 
mentioned terminal unit may be equipped with a means to output the data received as an 
object for recovery to the above-mentioned IC card. 

[Claim 5] It is the record medium which recorded the program installed in the terminal unit to 
which an IC card according to claim 2 is connected through IC card reader / writer. While 
receiving assignment of the data set as the nullification object of the one or more data stored 
in the above-mentioned IC card While receiving assignment of the data set as the validation 
object of a means to output the received content of assignment to the above-mentioned IC 
card, and the data stored in the above-mentioned IC card The record medium characterized by 
recording the program operated so that the above-mentioned terminal unit may be equipped 
with a means to output the received content of assignment to the above-mentioned IC card. 



[Translation done.] 
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(54) [3S9ie*&*M i c#- F&&vm§m* 

(57) [gift] 

yuT-jj* (AP) 2r N jL-wvmTmmz-thzt 

ifm^m i o la, ffs^mr^-ftn^^ 

P^)d*>c7). 31ig*f*i:-t£AP2r. ^^Bf^-ftJI^ffl 
^XWHtlrXfrb, IC*-H'J-//?'f^2 11 
£^LTi£g|£*x£Sg5fe3IS2 2 1 fcriffiH3-t!\ Bf^ffc 

tuwAPSr?i*-r-i». ic*-K2oni mm 
fr^&im-otzAPz. <gmL,xt5\^fzvm-im*m^ 
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102 











1 


1 






*AKH 




1 


1 


i&SttftAPl&SS 
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m&m i ] i ^vxk<7>?-?tmnc?>x * u tcf&iAs 

b. 

itmco -r - * tea & »u * #a t , 

tl.IC*-K t 

[ff^JS 3 ] If 3tm 1 * fcii 2 13©^ ic*- KTS> -5 

^y^-^3>-ru^A£-&tfdk£#$ti:-r£ I C 
[ff*3l4 ] M&m 1 ISm^O I C#- K# IC^-H y 

±fei c^-Ktc^mrv^ io&±<^-^o 
jtta i c#- }*frt>imzitt>tix ±.um3mwizmm 

ZtlX^&7-?(7)dioC7). mtm^btch^-? <r>fe 



[»^5 ] ff^2IBttO i c#- I C#- H y 

-y/j* 9*itLxmki$ii&mm ! mz4 >xh- 

_hfBI C^-h't^^fLTV^^-^coa^O, 
ltttmb%&7-?<Vi%1£Z%:imVZ>b2kl l z. glW 

[000 1] 

ifiim^tix^& i c*-v *mm t gm*& mmzis 

Z>Wfittzm-t&l><r>x*]bZ>. 
[0002] 

(ot. r A pj fc«?r. ) mm-th?-? i 
oiz Ltzmm&mtf-m.ftx'h -> . 

[0003] £*UC»U ifi^. IC*-H±TAPS 

Ht=*S*W-*ifcT« AP*IC^-KtoB*W&i6* 

[0 0 04] M$t<VAP$: lft^I C*— Htcfft 
*l*lU «^IC^-h'^l«cc7)IC^-H^-^-rs 

p ifffSMty xrn^t swat** fix ^ i . 

[000 5] ^-HOSCD— WfcLTtt, MUL 

tos^^-ci-^,, 

[0 006] MULTOSI1 Fuji - Keizai USA 
rBXmz&lf&mrf-TF'O'X ■ KOM^Hfc 

£J:?tC. IC^-h"tili^$^#^^AP*^ IC 

•yft&bmz. m«cr>APtf. m*&7T4TV* — 
)V • Tu^vMZi.^X^mi'Xm^tl, fl&C0AP# 

a- h* *>'IE L < fF^r $ ix/S i> cOfr^SfrZ^x. <y ^ -f h tz 
tbtz^ AP<0D-KCMot> I^^MfSs APOiE 

%&zmEL. immmmc)! c#-vi,zcr>?>.v-v£ 

ti&ZbZmE-t&O&WZfto . lC^-h'(ca-h*$ 
[0007] 



(3)082 000-11101 (P2 0 0 0-lchJS6i8 



imitffmLXot^&mmi multosh m 

*ffi<Z\bifiX'Z&cr>X\ Ifflfc'Sm&Sm-thZ.blfi 

[0008] L»Lwt>. z<v£d*mm% i wmi£. 
ic*-\t<vmmimizmkx. 3-—y<nmmx\ mm 

[0009] 0Jx.ff , Sff=#*«— BSWfc: I C#- Kfcffl 

t l^^apst i cx-vfr^mmzit. mmLf^m 
coap tWi^mt^ym^izit^ jl— ?<7)mmx\ ic 
*-vt,zmiznx^&APzmmz-&xmmkv. a 

fc. iIjB$-ti:Tfcv^AP^inifI$-t*-i,<ri:^*a*ix 

[00 10] L#«U MULTOS^-KOSfcLT 
v>€> I C/j—Vlzii^^xa^ ±3&Lti£dlz^ ict- 

-tso-c. a.— ?crwmx\ -&f&}izAP*mmzitz> 
£o%mmteX'Z%\,\ 

[0011] *&bmc?>B&}1±. I C#- KtsfftttSfrC 

^s^-^sr. a.— fcDmmx*Tmz j £&zt&*swzt 
-r&tmz. imm±xfo&7 : -?cD7FjEmm£ffi±^- 
z>zt&*jmt-r&zbizh&. 

[00 12] 

iz^*mn*. icx-vizm&iZixx^&T*-?*. 

I C^-Hp^T'^L^Bf^-fbliSrffl^T I C#-h'F*| 
•**J:aK:LTV>4. ^L?tBf^-fkii$r I C# 

fcV^Bf^-ftSt^fflUT I C*-HrtTfl[fi-i <k at 

[0013] *muz. f$i<vmmb lt. 

1 oJiJLh<7)T- 9 ifpm CD* * U ttSSS StltV^IC 

ixt&^®.t. na&Ltzm^imzim-t&^&b . b§ 

[0 0 14] fSKOfflWfciixJf. IC*-K*»S»iHB 



£. 

[0015] 1 CXr-H36» 

[ooi6] -tftiyh. *mwn. m2cr>mmk lx. 

^mzm\^xm^it~?&tmz. m^-itm^-?* 
B$^im<7)7-?izm.i*mz.z>3-&.t. ^L^nt^-ft: 

i: Sr^St Lfe I C#- F SUfftLT 
[0017] m 1 i^2^®«0 I C 

& loIiLh^-^Ji, AP£#& J:^^;^r&.r£:* ^ -e 
[00 18] 

[^consfetfo^®] ot. ^mcommcommiz^ 
[ooi9i i2ii. *mmmiz&& i c^-k^x 
[0020] 02tc^-r i a fc, *HM^®^^> I c 

*-HyXfAfi. JL-^tm^-t?> I C^-h'2 0 1 
fc. S8*S!H2 2 1fcj&*. IC*-K'J-^/7^^2 

1 l^UT««[S#ife»ji£4:!Se-5T^i. 

[0021] IC*-H20 1I1 MPU203fc. * 
^'J202t. iM^ft I F 2 0 4 t ZffiZ-XffifSLZtl. 
^*^S2 2 1«4. MPU223t, ^^EU222t. 
^-:if-H2 24i, f^X7b^225i:. jMSft I 
F 2 2 6 fc Srfiix.T«^;$nTV^„ 

[0022] it. I C#—VV— ^2 1 1 

{4. J*Sft IF212t, ilfi I F 2 1 3 

[0 023] IC^-H2 0 1fe<t^3|^a2 2 1 
{4. ^2 1 1 ^^L-CillSfiS- 

[0024]<J(t, IC*-h'2 0 1^t'J2 0 2t 

[0 0 2 5] 03fc^-r«i:3tc. IC*- H2 0lco^< 
^EU20 2^{4, mHii. ?l/y*7WSM (global 

system for mobile communication) loI^LhA 
PWtmZtlX^&ifi* ZZX'li. AP#1 (321) 
*3j;tXAP#2 ( 3 2 2 ) tfmhZtiX\^2>i>(r)b~t 



(4) 12000-1 1101 (P2000-lch!A) 



[0026] ifc, msiz^jk-tkolz. IC*-K20 
1^^^2 0 21:11 ICA-K2 0 1 r i: tcH*<7) 

him.m<r>&mm3 1 2 1 . ^^Bt^-tcfctt-s 1 c# 

-H2 0 1 ^?m^3 13i. #*f$fcBfr -5§-tC:fc{t& I C 
*-H2 0 1^ii3 14t, AP"Watff#3 1 5 
fc s I C*-H2 0 l^cOT?i:X£f?W&7t*6cO>^ 
XV— H 3 1 6 t fr't&S'jSft-C V^S . 
[0 0 2 7] 07tiAP<gIHt$83 1 5C7)— ^J^^-Tia 

[0 0 2 8] AP*gmm&3 1 5ti. IC#-K2 0 1 
O^^U 2 0 2tCf&tt^iXTV^AP (d^Tli. AP 
#1 (321) fcit^AP#2 (322) T$>&<, ) <F> 

[0 0 2 9] 07(^-tJ;d(C, AP#1 (32 1 ) CO 
APfIf-^Wh7 0 0ll AP# 1 (32 1 ) cr> 

m^x'h&Apm^i 0 it. ap7 T4>vmm7 

02t. AP#1 (321) *■ IC*- h'20 l'vo- 
HL^EIgcSr*-ro-h'^W^7 0 3i:, AP#1 

(32 1) JIC^-K2 0 lfrfc-rtf-hLfcEffl* 
*tf'J-M'»'^704i:, las^-TiS^x-^ 
1/3- h'8 00^«O^V^7 0 5i:, <£<7)APT*&.S> 
AP#2 (322) ^APflf-^'JXh700^ 
i>-hU^^^7 0 6i:*^^$^XTV^„ 

[0 0 3 0] 3ri3. AP#2 (322) ^APHf- 
?'JXh700i, . 

[0031] ^y^705Wl *fj£-r£AP 

- H 8 0 O'vW-f A P<DjgMrf5Z7 Ltzf^A 

•ctssesfts. =3r*3. mm^-^^a—v 80 ocr,mm 

[0032]i3CS-?t, ICj&— F20 1tf).X J Ey 
20 2W1 APjI3gTa^7A3 0 3i:. APEIfgr 
D^7A304t, *$m\M£$W772*3 0 5 t. 

5^3 0 St^lrtSil-C^-g.. 

[0033] S$3fc^g2 21^t'J222 fcltg 

[00 34] 04teijr*-J:3fc:, «*sgK2 2 1<0.X* 

u 2 2 2t{±, «*§ia2 2 1 zkizm^e>mifrx'$> 
&%mman?4 lit. ^^Bf^-^fc{fi,igiiE^<o^ 

mm4 1 2fc#tg**i3ixT\r'>&. 
[0 0 3 5] ifc. H4(C^fJ:5(C. ffi^l2 2 1 
^*U2 2 2fc« s APjSjg7°n^'7A4 0 3i:. A 
PIUfl^a^*7A4 0 4i:. i^^i7D7 , 5A4 0 5 

msnmt^ym^ya^ 5 a 4 0 7 taqattsfrc 



[0 0 36] IC*-h'2 0 1^^'J2 0 2fc 

J:t#I*i&{t2 1 l^t'J 2 2 2fctS^$ix^#«7 ? 

xmtztLti&Mm (tmmiz£->xm%,t>mztLti& 
mm) z&ts&mT-f&mzmmztix^&iicot-t 

[0037] mz, *mtmmiz{&& 1 c^-f^xt- 

Afcr*3\,vC % I C*-H2 0 ltctg#i$ixT^&AP£ 

3Q*^B2 2 1 iz&mzit&mnmmzn^x , mi £ 

[0038]Illi, ^Hife^HS^^-S I C^-FS^X 
^Atcfctt^, A PjSjSB#<0Kj#O»fiixSr^-rST-fe-g. . 

[0 0 39] 8^12 2 lT'APiljSm^5A4 0 
3jWBtt3*U I C*-h'2 0 1 tfl C*-H'J-// 
5-^^2 1 l{:JfA?n.-g.i:. IC*-F20 1tAP 
5S^7°o^7 A 3 0 3 jWB»§*u mTOAaS^H^fS 
ft.g>. Sris. UlTOMlii, I C#-F2 0 1OTPU 
2 0 3i5i^*SS2 2 1<?>MPU2 2 3#\ APjl 

mruy?i±3o 3a^t/AP^my"ay^M.4 o 3 §r 
$mT& ^ tx-mmztiz, „ 

[0040] Sf, I C#-F2 0 1 & £V3Hi%mW2. 

1 Hi, ffiSI^IESrtfd (XT77-100, Xf771 
10). ffiSSKfcovvcu, «itf , I SO ( I SO 

9798-3)fc, ^fcmsm^^m^mm^tm 

mZtlX&K). I SO ( I S09 7 9 8-2 ) 

[0 04 1181^, I C#-F2 0 l±>J;t>'3S5(^K 

2 1 Hi, ^AfSlESrffd (Xf-yri 0 1 , XfyT 

111) . 

[0042] *ABtEt=*JV^TIi. BL<tt, *i\ 41 
51^12 2 1^ f^7H2 2 5^U, 
- F eDA* £^--if L , jl— iW*-**- F 2 2 
4frtz>A~fi Lfc^XV— F$\ I C*-K2 0 lfciUfl 
•T-S (^T771 11). 

[0043] -^LT, IC#-F20 1**, 3|§3fc^K2 
1 Ifrti^XV-VZ&mt&b, SflL^XV-F 
fc**l> 2 0 2tC:^$nT^S>N°X T 7— F3 1 6 fc £ 
Jt«U IE L V o.-if T'£> S ti^frZmm- & (Xf7 
T10 1).=Sr*J. I C*-K2 0 ltcfcSISiE^m 

(i, a$*3£B2 1 uzmxaztiz. 
[0044] st, jEH^—rx'b&ztmsmzti 

tcW&l±. IC*-F20 1i3j:«^l2 11li 

i&mmAPcomfeZftd Uf'/rio2, xf^r 

112) . 

[0045] mmttm.AP<Dmfeiz&\^xi$. PL< 

ti. SS*^g2 2 1 I C^- H 2 0 1 tC^Stt 

$tLTV^AP£7)— f£§r. IC#-H2 0 1-WWIL 



4\ 

r 
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Tf -f X7W^ 2 2 5 idSt^L, JL— if 3&«f — H 2 
2 4*»6ftJ£UiAP£, iUB*r*APi:LT, IC* 
-H2 0 HCaWar*-* (x^ y^-l 12). Sris, £2 

*** a p oiisnte , m 5 iz^k-fA p mfe?—? \s 3 — k 

5 0 0 SriMff-r £ <I ttf *>*i* . 
[0046] l^5J4APjg}gx— ^1/3— h*500O— 

#y£*-tia-e£>.5>. 

[0047] H5tc^-rJ:3t, APjgj&r-^a- 
H 5 0 OJi, iligftmAP Sr— St;^-r^^i^<7)MSiJ 
^t&s api^ij^ 5 oit. S5f^«2 2 1 c7)«5fess 

(^U 2 2 2fctttt3iVC^S«*»8!ff4 1 
1 ) 502t, iSigft^A Pc7)fg^$:^5f^«2 2 1 
5f tttttt^: H B$ *• ^-T * -f A X ? 5 0 3 b *fj£ 

[0048] fU, IC^-K2 0 1^S*^12 

1 l*^APfg^ir- ; j'^rj-F5 0 0SrSfi-r-l.^i: 

2) . 

[0049]MWt, IC^-K2 0 1I1 APfg^ 

3) . irtii. iia««AP^«aaf#Tiif^fc-r* 

[005011U-C« IC#-b'2 0 1li, ft»Bf#^ 
Bf^-fH/fl-S-Ta^'^A 3 0 8 fcJ: -5 

T, Xf771 0 3^-^LfcB£^ffc§t§:ffiVvc, JUffi 

*mra p ^Bt^-^-r -s t &iz , B^-ftifroAP^?B5fe-r 

& (^T77104) . 

[005 1]«Wt, IC*-K2 0 1W\ W&SeSKT 
£ (Xf7/1 0 5). 

[00 5 2] Xf7ri0 5t'fl f¥L<li, IC#- 
K 2 0 1 Ji, 09 tC7K3*S£f£JEx-^ 1/3- H 9 0 

w^zmmt/MTur? a 3 0 s ^ttc 

ioT, ^^EU 2 0 2tc^$ixTV^ I C#-K2 0 
0<0$B^3 1 3£fflwc, SufcLfcBSFF-fclB^'ffcL 
T, =Sr*3, /vy 2^jlITOR*JJ:^»«* 

[00 5 3] l9liS^«fflf-^l/3-K9 0 0<0 

[0054] M9 IZttt? J: 0 fc, 1/3 
-h'9 0 0i4, 51igftaAP^)AP^iJ^9 0 li:. Bf 

#-fLL^iiigft*AP 9 0 2 1 . n&&om- 

2 2 l3b J 4>SftL^APtg^x-^l/3-h'5 0 04'<0 
a&3fc§fS53B i 50 2) 903t, ^-f AX^y7 (4g5fc£S 
S2 2 l*6*«l/fcAP»5&r-*l/3--K5 0 0* 



904i:> IC*-h'201 
KIBWFP ( ^ ^E: U 2 0 2 tCfSfc^flT ^€>#— K 

[00 551 SEWC, IC^-h'2 0 1fcj:^ffl5|^l 

2 1 Hi, Bt^LfciijttJWfeAPOiiBWlifTd <x 

T77106, Xf771 13). 

[0056] v§*Hki,tij&mm.AP<?>m%mizi5^x 

(i, SL<I1 i-T, IC*-K20 1^ flH^ffcLfc 

wmmAP*. mmw.2 2 1 tzmmrt (x^-y^ 

106) . ^rtj, Bt^-fbLfciffiBwaiAPosjeii, m 

6 IZTjk-tMWA Pf-?l/3-K60 0 & Z\ b 

[00 57] l36JijljlAPf— ^1/3- F 6 0 Oct)— 

[0 0 58] H6fc5jr$\fc3ic, jIjgAPx-^1/3— 
0 Bf^-fbL3til)Sft*APc7)AP^lJ : P6 0 

1 , XT7T104 TBt^ft LfciljMS** A P 6 0 2 
k, IC^-K2 0 1^_H^IJ^ (^tij2 0 2t 
tS^^^TV^^-h'^gii^3 1 3) 6 0 3 fc, X^-y 
7 , 105t«U>:i«604i;, I b' 2 0 1 <?) 

^iM6 0 5 <**U 20 2£»lfr&;hXV**&BM3 

1 4 ) i:#>£>fliJ££:fxT^&. 

[0059]fU, ^*^«2 2 1 I C#- H 2 
0 lA^HAPf- ^l/3-H60 OSrSfrr-S^i: 

Bt^fcSiiJtiHBWiAP^afrri (x^-y^i 

13). 

[0 0 60] §T, ffi*g!2 2 lti, JiigAPx-^ 
l^3-h'6 OOSr^fi-T^i:. S^^liE7°n^A4 0 
5£mirt&<iti l zJ:-oX . mMAP7~'-3>ua—V6 

0 0<*>cr>m%,6 0 4%m£?& (Xf771 14) . 
[006 1] XT77-1 1 4T1i. SL<a, 5S53fc§gB 

2 2 ui, imw^m^it/m^y^y^^A, o 7 

H 6 0 0 4>^^H6 0 5 $r , imMco&mmA 12* 

m^xm^Lx. &mm6 0 5zmEL. m^x. mm 

APf-^I/3-K6 0 0^I*6 04&, ffiMLfz 
^mmeo 5§rfflVvc«^-LT, S^604Sr^liE-r 

[0 0 62] -eLT, 3ffi55fc3£«2 2 1(1 Xf'y71 1 
4tCi^»^liEcT)Mm> iligAP7 ? -^l/r2-H6 0 0*>' 

1 — H 2 0 1 frtoi£{S'£iVfz tOTibli; t , t5i 
t/, iliSAP^-^l/rj-HeO O^^^nTV^ 
^JltSriilg-rSi:, iBiSAP-r — ^1/3— K6 0 0 
Sr, ^^eU 2 2 2ifvr{i^^Xiy^fi^ctSiftW^ (x 
^>y7°l 15). ^Tfc, 3S5l^a2 2 l(i, APcOjljg 
tc*5& Lfe & * I C * - H 2 0 1 izm&t h . 

[0063] f£T. IC*-F20 1li. APiDjiS 
{cf£S!jL^i , ^'4S5f5iia2 2 l a»£>ji£u$ii.S> k , *«$ 
•Ti,AP'gax-^'JX.h700Srs5SPr-rS (Xf77 

107) . 



(6) 992000-1 1 10 1 (P2000-1SA) 



[0064]Xf77107tlt ftftWCd IC# 

-H2 0U1 mmf-^ua-vso o£±j£U ± 

A PWm^r— 9 V X h- 7 0 0 4><7)tfM >9 7 0 5 lz 
[0 0 6 5] llSte^x-:?!^— h'8OO0>-#iJ£ 

coo 66] last^-riot;:, jSj^-^i/h-ks 

0011 ^5kg^iJ^ (**SSB2 2 l*»£5f3UiAP 
ffise-r-^ 1^3 - H 5 0 0 4><0^5f^S'J^ 5 0 2) 80 

Pfg5Sx— *L/3— H 5 OOW'fAx^yTS 0 

3) 8 0 2k, X^r-yyi 0 3 X'±J& L fcflHfflai 8 0 
3k, Xf771 0 5t«L!tI«8 0 4}:^M 

[0 0 67] JjLht=K^BLfeiM^l2j:oT, IC^-H 
20 1 KfSttSftT^&APfc. S*|£«2 2 HCjtjg 

[0 0 68]=5ri>. HlfciRLifciWWcisvvtii, *Hfc 
i*^TiI>B^AP£i«^^&J:oeLT^S#, ft 

V*. C cOitr^Cf 1 IC«-H2 0 1I1 Xf 771 0 

3 Til ftmm^nT/U^VXMzmitzf&Hmt: 
£s&'?Z>£di l z^&. 

[0 0 69] muzmLtimmzts^T. ic# 

-^2 0 1^^^8*1112 2 1(1 Xf7/1 0 Ofc 
J:^f771 1 OtftffttSKSEtfSB&C, 
-rS^k^T'&^tfO-C, jilAPf-^l/3-K6 0 0 

[0 0 70]^«I1CS LTtMmc&l VC , 

12 2 1(1 jl— ^tia»«J9f *Jfise$*«, i 3 tc L, 

H 2 2 4A^^L)t»c s JijgA 
P ^ a- h' 6 0 0 £fgi||*rr& J; o lz LX t J: v 
[0071]^, IlltC^L^iJjffrcfcVvctl 
a'Jf-(MJ:0S*4fcW:, **tc«J:*I8IEK«£ 

f'JfflLT, 3l®AP7 J -^l-a-h'6 0 0**1 C#-K 
2 0 l*^3im^n^t£7)-CS>l»C:k, &J:t/, jSSA 
P7 r -^l--rJ-H6 0 OjWK^SnrvvSrv^fc Sri| 

[0072] mz. ^mwrnmizghh i c#-K^x-f 
Atcij^r, Hiic^Lfettf^-cssais-^AP^iiia 

[0 0 7 3] El Oil *HS©B2&tc^S I C*-Vis 

x^Mz^hAPmm^m^mt^-tmx'h 

[0 0 74] Wmm.11 lTAPHIfl7-a^A4 0 
4**jg»$*u I C^-H2 0 \1filCi]—Yy—¥/ 
?4?2. 1 1 Icjf A£*U> k , I C#-K2 0 IT'AP 



0fsro^5 a 304 a«s»§*u jaT^Hba^f * 

fLh . ^r*5, JjlT^JKi:, I C K 2 0 1 COM P U 
2 0 3i>«J:T/3g;fc^S2 2 1<0MPU223^ AP0 

fira^A 3 o 4fc,J;tfAP0fg:ro^7A£!ifr?- 
■g><lk-C5igi§ft£. 

[0075] S-T, IC^-H201iiJ;^«12 

i id mix-miLtefmtmmiz. mmmz'n^ 

(XT771 0 0, Xf771 10), ^AfSIESrtTO 

(XT771 0 1 , XT771 11), 

[ 0 0 7 6 ] •£ LT , IE L Vvx-ifC** Z k #f&5E£ 
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